ban-type-assertions
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill directs the agent to execute standard development environment scripts including
npm run lint,npm run test,npm run typecheck, andnpm run knip. These commands are used for their intended purpose of verifying code changes and identifying linting violations within a project. - [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection as it involves reading and processing untrusted project files.
- Ingestion points: The agent reads and analyzes repository source code (TypeScript/JavaScript files) and configuration files (
.eslintrc.js) to identify code patterns. - Boundary markers: Absent; the skill does not explicitly define delimiters to separate codebase content from instructions.
- Capability inventory: The skill has the ability to execute shell commands via
npmand perform file system writes to refactor code. - Sanitization: Absent; the skill processes raw source code as is typical for refactoring tools.
Audit Metadata